Privacy Policy

1. Introduction

Welcome to Xela Automotive UK ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our services to inquire about or purchase our vehicles.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Data We Collect

We only collect data that is necessary to provide our services to you. When you use our website, particularly our contact forms, we may collect the following:

• Identity Data: First name and last name.
• Contact Data: Email address and telephone number (if provided in your message).
• Enquiry Data: Details about the specific vehicles (e.g., Make, Model) you are interested in and any additional information you provide in your message.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, and operating system used to access our website.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data under the following lawful bases:

• Performance of a Contract / Pre-contractual steps: To respond to your inquiries regarding our vehicles, arrange test drives, or discuss purchasing options.
• Legitimate Interests: To operate our website securely, prevent fraud, and improve our services.

4. Data Storage and Security

Your data is stored securely. We use modern, secure database hosting solutions (including encrypted connections) to ensure your contact inquiries and personal details are protected against unauthorized access, loss, or alteration.

Our website administrative features (such as vehicle inventory management and image uploads via Cloudinary) are strictly restricted to authorized personnel.

5. Third-Party Services

We do not sell your personal data. We may share your data with trusted third-party service providers solely for the purpose of operating our business:

• Hosting and Database Providers: To keep our website online and securely store inquiry data.
• Email Service Providers: To securely route and deliver your contact form messages to our team.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Inquiries that do not result in a vehicle purchase are typically securely deleted after a reasonable period.

7. Your Legal Rights

Under the UK GDPR, you have rights relating to your personal data, including the right to:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing of your personal data.

If you wish to exercise any of these rights, please contact us using the details below.

8. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: